Tag: Flow Analysis

Lancope Hosts NetFlow Virtual Town Hall Discussion

Atlanta, March 22, 2010 – Lancope, Inc.,the leader in NetFlow™ collection and analysis and the provider of the StealthWatch® System for flow-based network performance and security monitoring, today announced that it will host two one-hour virtual town hall discussions entitled “Ask the Expert: Your NetFlow Questions - Answered!” on Wednesday, March 24, 2010. Register for this event at /news/webinars/. WHAT:    Ask the Expert:  Your NetFlow Questions - Answered! WHEN:   10:00 a.m. ET and 2:00 p.m. ET on Wednesday, March 24, 2010 REGISTER:  /news/webinars/   Whether NetFlow newbie or experienced NetFlow Ninja, all levels of NetFlow familiarity are invited… READ MORE

Estimating NetFlow volume

Customers often ask "how much NetFlow traffic should we expect to see in our environment?". Unfortunately it's rather difficult to simply pull out a number because so many factors come into play. Here's a quick list of some of the most important factors in no particular order...1. Large number of public IP addressesIf you have a large amount of publically addressable IPs (such as a class B) you will be the victim of bulk scanning more often than an organization with a single class C. Automated scanning from worms and the like are the primary contributors. Each IP scanned will… READ MORE

Building context sensitive links into your SMC user interface.

Here's a quick tip for Lancope customers that would like to add web links to the StealthWatch GUI. StealthWatch 5.8 and later provides a hidden mechanism for adding context sensitive links to host IP address shown within the StealthWatch Management Console UI. By default only one web link (DShield.org) is provided...   We plan to provide a UI for adding additional web-based linkages in the near future, but for now the more adventurous users can follow the steps below to add additional links to various web-based applications.   1. Grab the WebLinks.xml by navigating to:  (where “” is the IP… READ MORE

Very Cool Workflow Addition in StealthWatch

Here is a very cool workflow addition (and huge time saver!) within StealthWatch System 5.8 as an option from a flow table query… When you are viewing a flow analysis and are looking at the exporter interface information to see where the flow came from, you can right-click the list of interface(s) and select Interface Status to jump to a view of each interface that observed the flow.    READ MORE

Resetting .JNLP associations to “Java Web Start.app” in OSX

Most people just use the Mac and never really have to think about how the underlying applications and services operate. You point, click, and things just happen. The Mac so rarely needs "fixing" that its users never have to learn how. So when something "core" breaks in OS X it's a pain to repair. Apple recently released Java SE 6.0 for OS X. This release offers the usual gambit of bug fixes, performance improvements, and tons of other items that most users will want. Unfortunately on some systems when you install SE 6.0 the "Open With..." associations between Java Web Start… READ MORE